Fimeg/RedFlag
Watch
1
0
Fork
You've already forked RedFlag
 0
Code Releases Activity

nightly: drop the server binary — agent+helper only, server installs via verified channel

Browse source
This commit is contained in:
Fimeg 2026-06-15 10:26:43 -04:00
commit a859fabedf
1 changed files with 13 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

25
.gitea/workflows/nightly.yml
View file

@ -90,19 +90,20 @@ jobs:
cp -r web/dist server/internal/webui/dist
test -s server/internal/webui/dist/index.html
- name: Build binaries (linux-amd64 + windows-amd64)
# Agent + helper only. The server is NOT shipped on the nightly channel:
# its supported install paths are docker-compose-from-source today and the
# per-OS installers landing in v0.3.0 — both verify the signed release
# manifest, which nightly deliberately does not generate. Shipping a bare
# nightly server tarball would be an install artifact with a stub manifest,
# so it's left to the versioned (v*) channel where the manifest is real.
- name: Build agent + helper binaries (linux-amd64 + windows-amd64)
if: steps.pre.outputs.go == 'true'
run: |
set -euo pipefail
VERSION="${{ steps.pre.outputs.version }}"
mkdir -p dist
build_go () { # $1=goos $2=suffix $3=ext
GOOS=$1 GOARCH=amd64 CGO_ENABLED=0 sh -c "
cd server && go build -ldflags \"-s -w \
-X github.com/Fimeg/RedFlag/server/internal/version/versions.AgentVersion=$VERSION \
-X github.com/Fimeg/RedFlag/server/internal/version/versions.ConfigVersion=$VERSION\" \
-o ../dist/redflag-server-$2$3 cmd/server/main.go"
build_agent () { # $1=goos $2=suffix $3=ext
GOOS=$1 GOARCH=amd64 CGO_ENABLED=0 sh -c "
cd agent && go build -ldflags \"-s -w \
-X github.com/Fimeg/RedFlag/agent/internal/version.Version=$VERSION \
@ -110,8 +111,8 @@ jobs:
-X github.com/Fimeg/RedFlag/agent/internal/version.BuildTime=$(date -u +%Y-%m-%dT%H:%M:%SZ)\" \
-o ../dist/redflag-agent-$2$3 ./cmd/agent/"
}
build_go linux linux-amd64 ""
build_go windows windows-amd64 ".exe"
build_agent linux linux-amd64 ""
build_agent windows windows-amd64 ".exe"
cd helper && cargo build --release && cd ..
cp helper/target/release/redflag-helper dist/redflag-helper-linux-amd64
@ -122,8 +123,8 @@ jobs:
set -euo pipefail
VERSION="${{ steps.pre.outputs.version }}"
cd dist
tar czf redflag-$VERSION-linux-amd64.tar.gz redflag-server-linux-amd64 redflag-agent-linux-amd64 redflag-helper-linux-amd64
zip -q redflag-$VERSION-windows-amd64.zip redflag-server-windows-amd64.exe redflag-agent-windows-amd64.exe
tar czf redflag-$VERSION-linux-amd64.tar.gz redflag-agent-linux-amd64 redflag-helper-linux-amd64
zip -q redflag-$VERSION-windows-amd64.zip redflag-agent-windows-amd64.exe
sha256sum redflag-$VERSION-linux-amd64.tar.gz redflag-$VERSION-windows-amd64.zip > checksums-$VERSION.txt
ls -la
@ -135,7 +136,7 @@ jobs:
PREV="${{ steps.pre.outputs.prev }}"
VERSION="${{ steps.pre.outputs.version }}"
{
echo "Nightly alpha build — untagged channel, replaced every night. Not fleet-upgradable (no manifest)."
echo "Nightly alpha build — untagged channel, replaced every night. Agent + helper test binaries only; not fleet-upgradable (no manifest). Install the server from a versioned (v*) release or build from source."
echo ""
echo "version: $VERSION"
echo "commit: $SHA"